The vulnerability involves incomplete initialization of the fwnode_handle structure in the Linux kernel's device property code. If a firmware node is allocated without zeroing memory and initialized via fwnode_init(), the secondary pointer and other fields may contain uninitialized memory. This uninitialized pointer may be dereferenced later, for example in dev_to_swnode(), potentially causing undefined behavior. The patch sets fwnode->secondary to NULL and initializes all remaining fields of the struct to prevent this issue.

The impact is related to potential dereferencing of uninitialized pointers within the kernel, which could lead to undefined behavior such as kernel crashes or memory corruption. No specific exploitation or active attacks are reported. The vulnerability affects kernel stability and reliability but no direct privilege escalation or remote code execution is described.

A fix has been implemented in the Linux kernel source code to properly initialize all fields of the fwnode_handle structure during fwnode_init(). Users should update to the fixed kernel version once available. Patch status is not yet confirmed from vendor advisory; check the official Linux kernel repositories or vendor advisories for the exact fixed versions and apply updates accordingly.